GWS-013 · Script
Chromebook Auto Update Expiration Report
Lists Chromebooks by the date they stop receiving automatic updates, for replacement planning.
Version 1.0.0Language PowerShellUpdated November 2026Report only, changes nothing
What it does
Read-only. Exports every Chromebook with its model, OU, status and update-through date (also called the Auto Update Expiration, or AUE, date) and groups them into: Expired, Expiring within -WarnMonths, and Supported. Also saves a summary by model and school year so you can budget replacements.
Requirements
GAM7, installed and authorized by you. GAM is not included. Windows PowerShell 5.1 or PowerShell 7.
How to run it
- Run from: an admin workstation or scheduled task with GAM7 set up
- This is an admin script for your Google Workspace tenant, not a per-device endpoint script
- User interaction: none with app-only sign-in
- Schedule: run on demand, or weekly for reports
Settings
| Name | What it does | Options | Default |
|---|---|---|---|
| WarnMonths | Months ahead to flag as Expiring soon. Default: 12. | 12 | |
| IncludeDeprovisioned | Include deprovisioned devices (excluded by default). | False | |
| AlertOnExpired | Exit 1 when any active Chromebooks are already past their update-through date. | False | |
| GamPath | Path to GAM. Default: gam (on PATH). | gam |
Exit codes
- 0 = Completed
- 1 = Expired active devices found (only with -AlertOnExpired)
- 2 = Script error (see log)
Testing steps
- Run it on one test tenant or small OU and check the output and log.
- Check the exit code: 0 = OK, 1 = needs attention, 2 = error (see log), 9 = this copy is past its Valid until date.
- Roll out to a small group next, then everyone.
Rollback steps
Report only. It saves a CSV and changes nothing else.
Version and change log
| Version | Date | Changes |
|---|---|---|
| 1.0.0 | November 2026 | First release. |